question

DennyCherry-5609 avatar image
0 Votes"
DennyCherry-5609 asked DennyCherry-5609 answered

Can you setup Conditional Access to force MFA on a specific website, no matter what? If so how?

I'm setting up Conditional Access. We want it setup to prompt for MFA on all websites when you aren't in a trusted location, (we have this setup), and bypass MFA when you are in a trusted location.

We have a specific website that we want to always prompt for MFA no matter the location that you are in. But I can't seem to find the correct set of settings to make this happen. What settings do I need to use (as well as what settings to I need to use for a new app registration) to make this work? This is a 3rd party website that I don't control, but the data on it is very sensitive, so we want to have MFA on it at all times.

azure-ad-multi-factor-authenticationazure-ad-conditional-access
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TKujala avatar image
0 Votes"
TKujala answered TKujala published

You can assign Conditional Access and MFA for services and sites listed the Cloud apps and actions area. Check the picture.

If you have created an app then you can assign the Contional Access rules for it.

So, you can't directly require MFA for untrusted locations.

The source for picture.

https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa

select-azure-management-app.png


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DennyCherry-5609 avatar image
1 Vote"
DennyCherry-5609 answered

What needs to be put for the new application as it's a third party site that I don't control?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.